# CVEs published 2000-04-10 23 CVEs were published on April 10, 2000: 0 critical, 0 high. Days are UTC. - [CVE-2000-0170](https://cve.now/CVE-2000-0170.md): Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable. (no CVSS) - [CVE-2000-0172](https://cve.now/CVE-2000-0172.md): The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges. (no CVSS) - [CVE-2000-0178](https://cve.now/CVE-2000-0178.md): ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions. (no CVSS) - [CVE-2000-0182](https://cve.now/CVE-2000-0182.md): iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and ca (no CVSS) - [CVE-2000-0186](https://cve.now/CVE-2000-0186.md): Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argumen (no CVSS) - [CVE-2000-0189](https://cve.now/CVE-2000-0189.md): ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onr (no CVSS) - [CVE-2000-0194](https://cve.now/CVE-2000-0194.md): buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters. (no CVSS) - [CVE-2000-0196](https://cve.now/CVE-2000-0196.md): Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email messag (no CVSS) - [CVE-2000-0200](https://cve.now/CVE-2000-0200.md): Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL ( (no CVSS) - [CVE-2000-0201](https://cve.now/CVE-2000-0201.md): The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which all (no CVSS) - [CVE-2000-0202](https://cve.now/CVE-2000-0202.md): Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in (no CVSS) - [CVE-2000-0207](https://cve.now/CVE-2000-0207.md): SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters. (no CVSS) - [CVE-2000-0208](https://cve.now/CVE-2000-0208.md): The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (\`) in p (no CVSS) - [CVE-2000-0209](https://cve.now/CVE-2000-0209.md): Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page. (no CVSS) - [CVE-2000-0210](https://cve.now/CVE-2000-0210.md): The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files. (no CVSS) - [CVE-2000-0211](https://cve.now/CVE-2000-0211.md): The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an i (no CVSS) - [CVE-2000-0212](https://cve.now/CVE-2000-0212.md): InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration informatio (no CVSS) - [CVE-2000-0215](https://cve.now/CVE-2000-0215.md): Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges. (no CVSS) - [CVE-2000-0217](https://cve.now/CVE-2000-0217.md): The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious x (no CVSS) - [CVE-2000-0218](https://cve.now/CVE-2000-0218.md): Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname. (no CVSS) - [CVE-2000-0221](https://cve.now/CVE-2000-0221.md): The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port. (no CVSS) - [CVE-2000-0222](https://cve.now/CVE-2000-0222.md): The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers (no CVSS) - [CVE-2000-0224](https://cve.now/CVE-2000-0224.md): ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2000-04-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.